Privacy policy

How we collect, use and protect your information.

Last updated: September 12, 2026

House Of Velari, a trading name of R&R Brands Ltd ("House Of Velari", "we", "us", "our"), takes your privacy seriously. This Privacy Policy explains how we collect, use and disclose your personal information when you visit, use or make a purchase through our store (the "Services"). Our store is powered by Shopify. By using the Services you acknowledge that you have read this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to personal information.

Personal information we collect

"Personal information" means information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect:

• Contact details: name, billing address, shipping address, phone number and email address
• Financial information: payment card details, payment account information, transaction details and payment confirmation (card numbers are processed by our payment providers and are not stored by us)
• Account information: username, password, preferences and settings
• Transaction information: items you view, add to your cart or wishlist, purchase, return, exchange or cancel
• Communications with us: information you include when contacting customer care
• Device information: device, browser, network connection, IP address and other unique identifiers
• Usage information: how and when you interact with or navigate the Services

How we collect your information

• Directly from you when you create an account, make a purchase, sign up for emails or contact us
• Automatically through the Services via cookies, pixels and similar technologies
• From our service providers, such as payment processors, shipping carriers and analytics providers
• From our partners or other third parties

How we use your personal information

• To provide and improve the Services: processing payments, fulfilling and shipping orders, sending order and account notifications, managing returns and exchanges, enabling reviews and personalizing your shopping experience
• Marketing and advertising: sending marketing communications by email or text message (with your consent where required) and showing you relevant advertising based on items you have viewed or purchased
• Security and fraud prevention: authenticating your account, providing a secure checkout and detecting or investigating fraudulent or unsafe activity
• Communicating with you: providing customer support and responding to your inquiries
• Legal reasons: complying with applicable law, responding to valid legal process and enforcing our terms and policies

Please keep your username and password safe and do not share them with anyone.

How we share your information

• Shopify and other service providers for IT, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping
• Business and marketing partners to provide marketing services and personalized advertising; partners use your information in accordance with their own privacy notices
• With your consent or at your direction, for example to ship your products or via social media widgets and login integrations
• Within our corporate group, with our affiliates
• For legal or business reasons, including in connection with a merger, acquisition or bankruptcy, to comply with legal obligations such as subpoenas, or to enforce our terms and protect our rights and the rights of others

Cookies and tracking

We and our service providers use cookies, pixels and similar technologies to operate and personalize the Services, remember your preferences, analyze site traffic and deliver relevant advertising. You can manage cookies through your browser settings. If your browser sends a Global Privacy Control opt-out signal, we treat it as a request to opt out of the sale or sharing of personal data for that browser and device; if we can associate the device with your account, we apply the opt-out to your account as well. Other than Global Privacy Control, we do not respond to "Do Not Track" signals. Learn more at globalprivacycontrol.org.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and with third parties that may be located in countries other than where you reside. We may use Shopify enhanced features that incorporate data from your interactions with our store, with other merchants and with Shopify; in those circumstances Shopify is responsible for the processing, including responding to requests to exercise your rights. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-party websites and links

The Services may include links to websites operated by third parties. We do not control and are not responsible for their privacy or security practices, and inclusion of a link does not imply endorsement. Information you share on public or semi-public venues, including social media, may be viewable by others.

Children's privacy

The Services are not directed to children. We do not knowingly collect personal information from children under 13, in accordance with the US Children's Online Privacy Protection Act (COPPA), or from anyone under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, contact us and we will delete it. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

Security and retention

We use appropriate technical and organizational measures to protect your personal information, including encrypted checkout, but no security measure is perfect and information sent over the internet may not be secure in transit. We retain personal information for as long as needed to maintain your account, provide the Services, comply with legal obligations (including tax and accounting rules), resolve disputes and enforce our agreements.

Your rights and choices

Depending on where you live, you may have some or all of the following rights. They are not absolute, and we may decline a request where permitted by law.

• Right to access or know the personal information we hold about you and how it is used and shared
• Right to delete personal information we maintain about you
• Right to correct inaccurate personal information
• Right to portability: receive a copy of your personal information in a usable format
• Right to opt out of the sale or sharing of personal information, targeted advertising and profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to non-discrimination: we will not discriminate against you for exercising your rights
• Communication preferences: opt out of promotional emails using the unsubscribe link in any email, or reply STOP to opt out of text messages; we may still send non-promotional messages about your account or orders

US state privacy rights

If you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia or another state with a comprehensive privacy law, you may exercise the rights above by emailing hello@houseofvelari.com with the subject line Privacy Request, or by visiting Your Privacy Choices. We will respond within the time required by your state's law (generally 45 days). If we deny your request, you may appeal by replying to our response; we will explain how in our decision. You may designate an authorized agent to make a request on your behalf, subject to verification.

California residents: in the preceding 12 months we have collected the categories of personal information listed above from the sources described, and disclosed them to the categories of third parties described for the business purposes described. We may "share" identifiers, internet activity and commercial information with advertising partners for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes requiring a right to limit. To exercise your California rights, or to submit a "Shine the Light" request, contact us as described above.

Nevada residents: you may direct us not to sell your covered information by contacting us; we do not currently sell covered information as defined under Nevada law.

UK and EEA residents

If you are located in the United Kingdom or the European Economic Area, you may also object to or restrict our processing of your personal information for certain purposes and withdraw consent where we rely on it, without affecting the lawfulness of prior processing. For the purposes of UK and EU data protection law, R&R Brands Ltd is the data controller of your personal information.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before processing your request.

Complaints

If you have a complaint about how we handle your personal information, please contact us first and we will do our best to resolve it. You may also contact your state Attorney General's office, the Federal Trade Commission at ftc.gov, or, for UK residents, the Information Commissioner's Office.

International transfers

We are based in the United Kingdom and use service providers in the United States and other countries, so your personal information may be transferred to, stored and processed outside the state or country you live in. Where we transfer personal information out of the UK or EEA, we rely on recognized transfer mechanisms such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, unless the destination has been found to provide adequate protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date and provide notice as required by applicable law.

Contact us

For questions about our privacy practices or to exercise your rights, contact us at hello@houseofvelari.com.

Data protection registration: R&R Brands Ltd is registered with the UK Information Commissioner's Office under reference ZC216263.